A Survey of Fast Flux Botnet Detection With Fast Flux Cloud Computing

Ahmad Al-Nawasrah, Ammar Ali Almomani, Samer Atawneh and Mohammad Alauthman
Additional contact information
Ahmad Al-Nawasrah: Taibah University, Saudi Arabia
Ammar Ali Almomani: Al-Balqa Applied University, Jordan
Samer Atawneh: College of Computing and Informatics, Saudi Electronic University, Saudi Arabia
Mohammad Alauthman: Department of Computer Science, Faculty of Information Technology, Zarqa University, Jordan

International Journal of Cloud Applications and Computing (IJCAC), 2020, vol. 10, issue 3, 17-53

Abstract: A botnet refers to a set of compromised machines controlled distantly by an attacker. Botnets are considered the basis of numerous security threats around the world. Command and control (C&C) servers are the backbone of botnet communications, in which bots send a report to the botmaster, and the latter sends attack orders to those bots. Botnets are also categorized according to their C&C protocols, such as internet relay chat (IRC) and peer-to-peer (P2P) botnets. A domain name system (DNS) method known as fast-flux is used by bot herders to cover malicious botnet activities and increase the lifetime of malicious servers by quickly changing the IP addresses of the domain names over time. Several methods have been suggested to detect fast-flux domains. However, these methods achieve low detection accuracy, especially for zero-day domains. They also entail a significantly long detection time and consume high memory storage. In this survey, we present an overview of the various techniques used to detect fast-flux domains according to solution scopes, namely, host-based, router-based, DNS-based, and cloud computing techniques. This survey provides an understanding of the problem, its current solution space, and the future research directions expected.

Date: 2020
References: Add references at CitEc
Citations: View citations in EconPapers (4)

Downloads: (external link)
http://services.igi-global.com/resolvedoi/resolve. ... 018/IJCAC.2020070102 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:igg:jcac00:v:10:y:2020:i:3:p:17-53

Access Statistics for this article

International Journal of Cloud Applications and Computing (IJCAC) is currently edited by B. B. Gupta

More articles in International Journal of Cloud Applications and Computing (IJCAC) from IGI Global
Bibliographic data for series maintained by Journal Editor ().